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DETAILED ACTION 
Response to Amendment 

1 . This office action is in response to tine communication dated 3/5/2009. 

2. Claims 1-15, 18-21 and 24 are pending. Claims 16-17 and 22-23 are being 
cancelled. 

Response to Arguments 

3. Applicant's arguments filed 3/5/2009 have been fully considered but they are not 
persuasive. The Applicant argues that Peyravian does not disclose generating random 
information R based on the read unique management information and using the read 
prime q and the generated random information R to calculate N according to N= 2 x 
random information R x prime q +1 . The Examiner respectfully disagrees, AAPA 
discloses the Pocklington's primality test is used to test primality of calculated prime 
candidate N according to N = 2 x random number R x prime q + 1 (AAPA: 0030). AAPA 
does not explicitly teach random number R is generated based on the unique 
management information. Peyravian discloses his algorithm will guarantee that all of the 
primes generated by different users are different and are ultimately tied up to user- 
specific data (Peyravian: Section 2, the 12th paragraph on page 284) and the users' 
unique characteristics can be a user identifier, device identifier, or company identifier 
(Peyravian: Section 8 on page 287). As such to make the information random and user- 
specific so the prime numbers and RSA keys can be checked for repudiation, it is 
obvious to combine the teaching of AAPA and Peyravian. 
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Claim Objections 

4. Claim 10, 14, 18 and 20-21 are objected to because of tine following informalities: 

a) As to claim 10, the phrase "multiplying the management information" 
should be - multiplying the unique management information -. 

b) As to claim 21 , the phrase "and a secondary information storage unit 
storing a predetermined verification calue" should be - and a secondary information 
storage unit storing a predetermined verification value-. 

c) As to claim 24, the phrase "the primality testing unit is operable totest 
primality of the calculated prime candidate N" should be -- the primality testing unit is 
operable to test primality of the calculated prime candidate N-. 

The limitation of claim 24 depends on claim 1, however that exact limitation is 
already recited in claim 1 . As such, the same limitation is duplicated. 
Appropriate correction is required. 

Claim Rejections - 35 USC § 101 

5. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

6. Claim 20 is rejected under 35 U.S.C. 101 as not falling within one of the four 
statutory categories of invention. While the claim recites a series of steps or acts to be 

performed, a statutory "process' under 35 U.S.C. 101 must (1) be tied to particular 
machine, or (2) transform underlying subject matter (such as an article or material) to a 
different state or thing. See page 10 of In Re Bilski 88 USPQ2nd 1385. The instant 
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claim is neither positively tied to a particular machine that accomplishes the claimed 
method steps nor transform underlying subject matter, and therefore does not qualify as 
a statutory process. 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

8. Claims 1-9, 18, 20-21 and 24 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Applicant Admitted Prior Art (AAPA) in view of Peyravian et al. 
("Generation of RSA Keys That Are Guaranteed to be Unique for Each User). 

a) As to claims 1 , 20-21 and 24, AAPA discloses a prime calculating 
apparatus for calculating a prime candidate N larger than a known prime q and testing 
primality of the calculated prime candidate N, comprising: 

a prime storage unit storing the known prime q; a random information generation 
unit operable to generate random information; a candidate calculation unit operable to 
read the prime q from the prime storage unit, and calculate the prime candidate N using 
the read prime q and the generated random information R, according to N= 2 x random 
information R x prime q + 1 ; a primality testing unit operable to test primality of the 
calculated prime candidate N according to the Pocklington's primality test (AAPA: 
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0030); and an output unit operable to output the calculated prime candidate N as a 
prime N wlien tlie primality of the calculated prime candidate N is determined (AAPA: 
0024-0030). AAPA is silent on the capability of having unique management information 
and generating random information R based on the unique management information. 
Peyravian is relied on for the teaching of having unique management information and 
generating random Information R based on the unique management information 
(Peyravian: sections 2-4). It would have been obvious to one of ordinary skill in the art 
at the time of the invention to employ the use of having unique management information 
and generating random information R based on the unique management information in 
the system of AAPA, as Peyravian teaches, so as to offer much stronger uniqueness 
and protection to system. 

b) As to claims 2-3, the combination of AAPA and Peyravian discloses the 
random information generation unit Includes: a reading subunit operable to read the 
unique management information from the management information storage unit; a 
random number calculation unit operable to calculate a random number r; a combining 
subunit operable to make a combination of the read unique management information 
and the generated random number r; and a computation subunit operable to compute 
the random information R based on the combination by applying an injection function to 
the combination (Peyravian: section 3). 

c) As to claim 4, exclusive-or function is a well-known, standard operation on 
bits. It can be used to XOR a plaintext with a keyword to generate a ciphertext. It is a 
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designed choice to apply XOR function to the key information and the combination as 
claimed. 

d) As to claim 5, the combination of AAPA and Peyravian discloses 
calculating the prime candidate N having a bit length twice a bit length of the prime q, 
wherein the random number calculation subunit calculates the random number r, a bit 
size of which is obtained by subtracting a bit length of the unique management 
information and 1 from the bit length of the prime q (i.e. random number r having length 
(q) -1 bit, random information R is a combination of random number r and management 
information as disclosed by Peyravian, therefore the bitsize of random number r is 
obtained by subtracting a bit length of the unique management information and 1 from 
the bit length of the prime q, AAPA: 0024). 

e) As to claim 6, the combination of AAPA and Peyravian discloses the 
primality testing unit includes: a first judging subunit operable to judge whether the 
phme candidate N satisfies 2 "^'^ = 1 mod N; and a second judging subunit operable to 
perform, when the judgment of whether the prime candidate N and the random 
information R satisfy 2^^ ^ ^ mod N, and to determine the primality of the prime 
candidate N when the performed judgment is affirmative (AAPA: 0030, 0032-0033). 

f) As to claim 7, the combination of AAPA and Peyravian discloses the 
primality testing unit includes: a first judging subunit operable to judge whether the 
prime candidate N satisfies 2 = 1 mod N; and a second judging subunit operable to 
perform, when the judgment of whether the prime candidate N and the random 
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information R satisfy GCD(2 -1 , N) =1 , and to determine the primality of prime 
candidate N when the performed judgment is affirmative (AAPA: 0027, 0028). 

g) As to claims 8-9, the combination of AAPA and Peyravian discloses an 
iteration control unit operable to control the random information generation unit, the 
candidate calculation unit, and the primality testing unit to iterate the generation of the 
random information R, the calculation of the prime candidate N, and the primality testing 
until the primality of the calculated prime candidate N is determined by the primality 
testing unit (AAPA: 0029), the iteration control unit therefore iterates the random 
information R', calculates N -2 x random information R' x prime N +1 and tests the 
primality of N' and continues with the iteration steps. 

h) As to claim 18, the majority of this claim is addressed in claims 1 and 8, 
with the addition of a key issuing server apparatus for generating and issuing the private 
key and the public key of RSA encryption for a terminal further comprising a key output 
unit operable to output the generated private key to the terminal; and a publishing unit 
operable to publish the generated public key that is addressed by the combination of 
AAPA and Peyravian discloses (AAPA: 0004). 

9. Claim 19 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Applicant Admitted Prior Art (AAPA) in view of Peyravian et al. ("Generation of RSA 
Keys That Are Guaranteed to be Unique for Each User) and further in view of Oka et al. 
(2002/0108042). 
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The combination of AAPA and Peyravian is silent on tlie capability of having a 
certificate issuing server apparatus, wherein the key output unit outputs the public key 
to the certificate issuing server apparatus and the certificate issuing server apparatus 
includes: a storage unit storing a private key of the certificate issuing server apparatus; 
an obtaining unit operable to obtain the public key; a certificate generation unit operable 
to (i) generate signature data by applying a digital signature to public key information 
including the public key, using the private key of the certificate issuing server apparatus, 
and (ii) generate a public key certificate including at least the public key and the 
generated signature data; and an output unit operable to output the generated public 
key certificate to the key issuing server apparatus. Oka is relied on for the teaching of 
having a certificate issuing server apparatus, wherein the key output unit outputs the 
public key to the certificate issuing server apparatus and the certificate issuing server 
apparatus includes: a storage unit storing a private key of the certificate issuing server 
apparatus; an obtaining unit operable to obtain the public key; a certificate generation 
unit operable to (i) generate signature data by applying a digital signature to public key 
information including the public key, using the private key of the certificate issuing 
server apparatus, and (ii) generate a public key certificate including at least the public 
key and the generated signature data; and an output unit operable to output the 
generated public key certificate to the key issuing server apparatus (Oka: 0001 , 0018- 
0019, Fig. 2-3, 8). It would have been obvious to one of ordinary skill in the art at the 
time of the invention to employ the use of having a certificate issuing server apparatus, 
wherein the key output unit outputs the public key to the certificate issuing server 
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apparatus and the certificate issuing server apparatus includes: a storage unit storing a 
private l<ey of the certificate issuing server apparatus; an obtaining unit operable to 
obtain the public key; a certificate generation unit operable to (i) generate signature data 
by applying a digital signature to public key information including the public key, using 
the private key of the certificate issuing server apparatus, and (ii) generate a public key 
certificate including at least the public key and the generated signature data; and an 
output unit operable to output the generated public key certificate to the key issuing 
server apparatus in the system of AAPA and Peyravian, as Oka teaches, so as to 
provide public key certificate for users. 

Allowable Subject Matter 

1 0. Claim 1 0 would be allowable if rewritten to overcome the claim objection set forth 
in this office action. Claims 11-15 depends on claim 10 and would be allowable. 

Conclusion 

1 1 . Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 

§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
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mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

1 2. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Minh Dieu Nguyen whose telephone number is 571-272- 
3873. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Taghi T. Arani can be reached on 571-272-3787. The fax phone number for 
the organization where this application or proceeding is assigned is (571) 273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see httD://Dair-direct.uspto.aov . Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 



/Minh Dieu Nguyen/ 

Primary Examiner, Art Unit 2438 



